All products

lightning

PyPI · Package
9 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
PyTorch Lightning allows arbitrary code execution through checkpoint _instantiator hyperparametersCVE-2026-58659 · GHSA-QQMF-GPG7-G8GWVersion ranges need review. lightningpytorch-lightning PyPIRed Hat High Fix reported
Code Injection in PyTorch LightningCVE-2022-0845 · GHSA-R5QJ-CVF9-P85HVersion ranges need review. lightningpytorch-lightning PyPI Critical Fix reported
Compromise of PyTorch Lightning PyPi Package VersionsCVE-2026-44484 · GHSA-W37P-236H-PFX3Version ranges need review. lightningpytorch-lightning PyPI Critical Fix reported
pytorch-lightning is vulnerable to Deserialization of Untrusted DataCVE-2021-4118 · GHSA-2VJ5-PX25-GJRPVersion ranges need review. lightningpytorch-lightning PyPI High Fix reported
pytorch-lightning vulnerable to Arbitrary File Write via /v1/runs API endpointCVE-2024-5980 · GHSA-MR7H-W2QC-FFC2Version ranges need review. lightningpytorch-lightning PyPI Critical Fix reported
Remote code execution in pytorch lightningCVE-2024-5452 · GHSA-CGWC-QVRX-RF7FVersion ranges need review. lightningpytorch-lightning PyPI Critical Fix reported
PyTorch Lightning load_from_checkpoint has an insecure checkpoint deserializationCVE-2026-31221 · GHSA-75M9-98V2-HJPMVersion ranges need review. lightningpytorch-lightning PyPIRed Hat High No fix reported
PyTorch Lightning path traversal vulnerabilityCVE-2024-8019 · GHSA-4CV3-V7PV-RFHFVersion ranges need review. lightningpytorch-lightning PyPI Critical Fix reported
PyTorch Lightning denial of service vulnerabilityCVE-2024-8020 · GHSA-98FP-7V67-4V3QVersion ranges need review. lightningpytorch-lightning PyPI High No fix reported